A developer's AWS Lambda function generates temporary files (less than 10 MB) that are accessed and modified during execution and do not need to be stored permanently. Where should these temporary files be stored?

In the /tmp directory of the Lambda execution environment.

On Amazon Elastic File System (EFS).

On Amazon Elastic Block Store (EBS).

A company uses Amazon Cognito user pools with MFA to secure user records and requires that an email notification be sent for every login. Which solution is the most operationally efficient?

Develop a Lambda function using Amazon SES and attach it as a Cognito post‑authentication trigger to send email notifications.

Develop a Lambda function using Amazon SES to send email notifications, invoked via an API Gateway endpoint triggered by the client upon login confirmation.

Develop a Lambda function using Amazon SES and set up a CloudWatch Logs subscription filter to trigger it based on login events.

Configure Cognito to stream logs to Kinesis Data Firehose and use a Lambda function to process the logs and send email notifications.

A company migrated its application to EC2 instances. Although the UI scales well, the shipping request process is encountering duplicate, lost, and out‑of‑order requests. Each shipping request is <250 KB and takes 5–10 minutes to process. The solution must ensure that each request is processed exactly once and in order, without modifying the legacy system.

Use a Lambda function triggered by an SQS FIFO queue; modify the application to write to the FIFO queue.

Use a Kinesis Data Firehose delivery stream and a Kinesis data stream; modify the application to write to the stream.

Use a Lambda function triggered by an SNS topic to process requests.

Use a Lambda function triggered by an SQS standard queue; modify the application to write to the queue.

A developer is building an application that runs on EC2 and stores data in DynamoDB. After heavy usage, performance degrades and users report increased latency. What solution will meet the requirements to improve performance with minimal changes?

Implement a caching layer using Amazon ElastiCache for Redis.

Increase the provisioned capacity of the DynamoDB table.

Modify the application code to add exponential backoff.

Re-architect the application to use DynamoDB on‑demand capacity mode.

A business operates Amazon EC2 instances across several AWS accounts. A developer is tasked with creating an application that aggregates lifecycle events from these instances. These events must be consolidated into a single Amazon SQS queue in the primary AWS account for further processing.

Adjust the primary account’s event bus permissions to accept events from other accounts. In every account, establish an EventBridge rule to forward all EC2 lifecycle events to the main account’s event bus. Finally, in the main account, create an EventBridge rule that filters these events and designates the SQS queue as its target.

Set up Amazon EC2 to forward lifecycle events from every account to the primary account’s EventBridge event bus. Then, create an EventBridge rule in that bus to capture all lifecycle events, using the SQS queue as the designated target.

Apply resource policies on the main account’s SQS queue to grant write permissions to each account. In each account’s EventBridge event bus, set up a rule that filters for EC2 lifecycle events and directs them to the SQS queue in the primary account.

Develop an AWS Lambda function that periodically reviews all EC2 instances across accounts to detect lifecycle changes, sending a notification to the SQS queue in the main account whenever a change is found. A scheduled EventBridge rule triggers this function every minute.

A developer modifies an application that previously used IAM user access keys in environment variables to access DynamoDB via boto. After replacing them with an IAM role attached to the EC2 instance, the application logs AccessDeniedException errors.

The application is still using the old environment variable credentials.

IAM policies might take time to propagate.

The AWS SDK does not support instance role credentials.

The instance’s security group blocks access to the metadata endpoint.

A developer is building a market application using a DynamoDB table that stores pricing data. Sellers report that after updating an item’s price, the product listing does not reflect the new price. What is the most likely cause?

The cache is not invalidated when the price is updated.

The price is being retrieved using a write‑through cache.

The DynamoDB table’s read capacity is insufficient.

The DynamoDB table’s write capacity is insufficient.

In an AWS CodeDeploy in‑place deployment, what is the correct order of lifecycle hooks?

ApplicationStop -> BeforeInstall -> AfterInstall -> ApplicationStart.

BeforeInstall -> ApplicationStop -> ApplicationStart -> AfterInstall.

BeforeInstall -> ApplicationStop -> ValidateService -> ApplicationStart.

ApplicationStop -> BeforeInstall -> ValidateService -> ApplicationStart.

A developer is creating a machine learning (ML) pipeline in AWS Step Functions that contains Lambda functions. An SQS queue delivers ML model parameters to the pipeline, and trained models are uploaded to an S3 bucket. The developer needs to test the ML pipeline locally without making integration calls to SQS and S3. Which solution meets these requirements?

Use AWS Step Functions Local with mocked service integrations.

Use Amazon CodeGuru Profiler to analyze the Lambda functions.

Use the AWS Step Functions Local Docker image to run and test the Lambda functions.

Use the AWS SAM CLI to run and test the Lambda functions locally.

A developer is creating a Lambda function that processes video files received from an SQS queue. The function requires temporary storage of up to 100 MB during processing. Which solution is most efficient for handling these temporary files?

Use the /tmp directory in the Lambda execution environment and delete files after processing.

Store files in an EBS volume and delete them after processing.

Copy files to an EFS file system and delete them afterward.

Upload files to an S3 bucket with a lifecycle policy for deletion.

A developer maintains an API Gateway REST API secured with Amazon Cognito. With a new API version that includes new endpoints and backward‑incompatible changes, beta access must be provided to team developers without impacting current customers. Which solution achieves this with minimal operational overhead?

Create a development stage in the existing API Gateway and instruct developers to use this stage.

Deploy a separate API Gateway instance that points to the new API version and have developers use its endpoints.

Implement a query parameter in the API code to switch between versions.

Define new API Gateway endpoints for the additional features.

A financial company must retain original customer records containing PII for 10 years, while ensuring that only authorized personnel can access the PII and third parties receive statistical data without it. A developer has stored the immutable record in Amazon S3 and written a Lambda function named removePii to strip PII when needed. How should the solution be configured to meet these requirements with a single copy of the document?

Create an S3 Object Lambda access point, associate it with the removePii function, and use this access point to retrieve the object without PII.

Configure an S3 event notification to trigger the removePii function on each GET request, returning the object without PII.

Configure an S3 event notification to trigger the removePii function on each PUT request, and use PUT requests to access the sanitized object.

Create a standard S3 access point and use the GetObjectLegalHold API with the removePii function to access the object without PII.

A developer has created a Lambda function that queries an Aurora MySQL DB instance. The function fails with “too many connections” errors. Which solution meets these requirements with the least operational effort?

Create an RDS Proxy and have the Lambda function query the proxy.

Create a read replica for the DB instance and query the replica.

Migrate the data to Amazon DynamoDB.

Configure Aurora for Multi‑AZ deployment.

A company uses AWS CloudFormation to deploy an application that uses an Amazon API Gateway REST API with AWS Lambda function integration and Amazon DynamoDB for data persistence. The application has three stages (development, testing, production), each with its own DynamoDB table. When promoting changes to production, unexpected issues occur. A developer needs to route 20% of production traffic to the new API version while routing 80% to the existing production API, minimizing errors per customer.

Configure canary settings for the production stage API to direct 20% of traffic to the new deployment and deploy the changes.

Incrementally update 20% of the changes and deploy repeatedly.

Update the Amazon Route 53 DNS record with a weighted routing policy (80% to production, 20% to testing stage alias).

Deploy an Application Load Balancer in front of the API, registering production and testing stages as targets with weights 80% and 20%.

A developer is designing an application that uses Amazon S3 to store objects. The company must ensure that all data transferred to S3 is encrypted in transit. Which solution meets this requirement?

Require all clients to use HTTPS when accessing S3 by configuring a bucket policy that denies non‑secure requests.

Enable server‑side encryption on S3.

Encrypt data on the client side before uploading to S3.

Use Amazon CloudFront to deliver content over HTTPS.

A developer is building a web API that receives requests through an internet‑facing Application Load Balancer (ALB) with an HTTPS listener. The developer configures an Amazon Cognito user pool for authentication and must ensure every request is authenticated via Cognito.

Create an authentication action for the ALB listener rules with type authenticate-cognito and set OnUnauthenticatedRequest to “deny.”

Add a listener rule to return a fixed 401 Unauthorized response if the Authorization header is missing.

Create an API Gateway API with a Cognito authorizer and forward requests to the ALB.

Create a new target group with a Lambda function to validate the Authorization header.

A developer writing an AWS Lambda function needs to log key events with a unique identifier for each invocation. Which solution best meets this requirement?

Retrieve the request identifier from the AWS request ID in the context object and log to standard output.

Retrieve the request identifier from the event object and log to a file.

Retrieve the request identifier from the event object and log to standard output.

Retrieve the request identifier from the context object and log to a file.

A developer needs to insert a record into an Amazon DynamoDB table immediately after a new file is added to an Amazon S3 bucket. Which set of steps should be taken to achieve this?

Configure an S3 event to trigger a Lambda function that inserts records into DynamoDB.

Set up an EventBridge event to monitor the S3 bucket and insert records into DynamoDB.

Create a Lambda function that polls the S3 bucket and then inserts records into DynamoDB.

Establish a scheduled cron job to insert records into DynamoDB.

A developer is building an application using AWS CloudFormation and AWS CodeCommit to manage infrastructure as code. The developer must write unit tests for the generated CDK templates and validate that critical security configurations are enabled. Which two actions will meet these requirements with minimal development overhead?

Use the CDK assertions module to write unit tests for the constructs and run them in a CI/CD pipeline.

Use the CDK Aspects class to create custom rules to validate security configurations and fail synthesis if violations occur.

Use a unit testing framework to write custom tests against the generated cdk.out file and run them in a CI/CD pipeline.

Use the CDK runtime context to set key-value pairs and fail synthesis if violations occur.

Write a script that searches the code for specific configuration strings and reports violations.

A developer is building an ecommerce application that stores product reviews in a DynamoDB table. Each record includes a Review ID, Product ID, User ID, Product Rating (1–5), and an optional comment. The table’s partition key is Review ID, but the most frequent query is to retrieve the top 10 reviews with the highest rating for a given product.

A global secondary index (GSI) with Product ID as the partition key and Product Rating as the sort key.

A GSI with Product ID as the partition key and Review ID as the sort key.

A local secondary index (LSI) with Product ID as the partition key and Product Rating as the sort key.

A local secondary index (LSI) with Review ID as the partition key and Product ID as the sort key.

A developer wants to create a Lambda function that is invoked every 10 minutes in a fully serverless and automated manner. Which solution meets these requirements?

Create an EventBridge rule with a rate expression to invoke the Lambda function every 10 minutes.

Deploy an EC2 instance with a cron job.

Configure an environment variable named PERIOD with value 600.

Create an SNS topic with a 600‑second timer subscription to the Lambda function.

A company’s ecommerce website uses a Lambda function and an RDS for MySQL database for order fulfillment, which must return order confirmations immediately. During a high-traffic marketing campaign, “too many connections” errors occur despite healthy DB metrics. What should a developer do to resolve these errors?

Initialize the DB connection outside the handler and use RDS Proxy instead of connecting directly to the DB cluster.

Initialize the DB connection outside the handler; increase the max_user_connections setting and restart the DB cluster.

Use SQS FIFO queues to queue orders; adjust Lambda concurrency to the number of available connections.

Use SQS FIFO queues and limit Lambda concurrency to a value lower than available DB connections.

A developer has built a data collection application where users upload files and await a validation status on a dashboard. Since validating large files takes time, the developer must refactor the app so that the validation result is pushed immediately to the user’s dashboard without reloading the page.

Integrate the client with an API Gateway WebSocket API; store the file with the connection ID and push the status when processing is complete.

Set up a WebSocket server on an EC2 micro instance to push updates.

Email the user when validation is complete.

Use DynamoDB Streams with SNS to trigger dashboard updates.

A developer manages three AWS accounts. Each account contains an RDS DB instance in a private subnet. The developer needs to ensure that the same users are created and updated consistently across all accounts.

Create a CloudFormation template with a custom resource to create the users; deploy it in each account.

Create a CloudFormation template that declares the users; deploy it in each account.

Write a script to create the users and run it on an EC2 instance in each account.

Implement a Lambda function that creates the users in the databases; provide details for all accounts.

A developer is creating a Lambda function that processes video files from an SQS queue. The function times out on longer videos despite having the maximum allowed timeout configured. Which solution will address this issue with minimal operational changes?

Increase the memory allocation of the Lambda function.

Increase the SQS queue’s visibility timeout.

Decrease the batch size of messages from SQS.

Use multi‑threading in the Lambda function to process videos concurrently.

An application running in an EC2 Auto Scaling group experiences long instance startup times due to a slow‑running UserData script. The solution must ensure that instances become available quickly, always run the latest validated application version with all security patches, and minimize the number of images created. Which two steps should be taken?

Use EC2 Image Builder to create an AMI with all required patches and agents, and update the Auto Scaling launch configuration to use this AMI.

Remove OS patching commands from the UserData script.

Use EC2 Image Builder to create an AMI with the latest application version and patches, and update the Auto Scaling launch configuration to use this AMI.

Set up AWS CodeDeploy to deploy the latest application version at runtime.

Set up AWS CodePipeline to deploy the latest application version at runtime.

A developer is optimizing a Lambda function and wants to test changes in production on a small percentage of traffic without changing the API Gateway URL. Which solution meets these requirements?

Create an alias on the $LATEST version, update API Gateway to reference the alias, and configure a canary release to direct 10% of traffic to the new version.

Create a new function version, update API Gateway to reference it, and configure a canary release to direct 10% of traffic to the new version.

Create a new function version, update API Gateway, and deploy a new stage.

Create a new function version and deploy it fully to production.

A developer is creating a static website that uses Amazon CloudFront to deliver content from a private S3 bucket. Users can access pages like /products/index.html but receive errors when accessing directories (e.g., /products/) without specifying a file name. Which solution meets these requirements without exposing the S3 bucket publicly?

Create a CloudFront function that appends "index.html" to requests for directories.

Update the CloudFront distribution’s default root object to index.html.

Enable S3 static website hosting and change the CloudFront origin to the S3 website endpoint.

Configure a custom error response in CloudFront to redirect 404 errors to /index.html.

A company hosts a client‑side web application on Amazon S3 delivered via CloudFront. To support additional subsidiaries, common JavaScript files and web fonts were moved to a central S3 bucket, but browsers block these resources. What should the developer do to prevent this issue?

Configure a CORS policy on the central S3 bucket to permit cross‑origin access for the web applications.

Create four S3 access points for the central bucket, assigning one per web application.

Create and attach a bucket policy to the central S3 bucket to allow access.

Implement a Content‑MD5 header for each request to the central S3 bucket to ensure message integrity.

A company is migrating a multi‑node Windows legacy application to Amazon EC2. The application uses a network shared folder to store XML configuration files. To ensure high availability for the configuration repository cost‑effectively, which solution should be implemented?

Use an Amazon S3 bucket to host the repository, migrate the XML files, and update the application to access the files using the AWS SDK.

Attach an EBS volume to an EC2 instance, set up a file system, share a folder via the OS, and modify the application to use the shared folder.

Deploy a micro EC2 instance with an instance store volume, share a folder via the OS, and update the application accordingly.

Use an Amazon S3 bucket, migrate the XML files, and mount the S3 bucket as a local volume on the EC2 instances.

A developer is creating a mobile application that does not require user login. Which method provides the most efficient and secure way to grant users access to AWS resources without managing credentials manually? A- Use an external identity provider to authenticate users. B- Create a Lambda function to generate IAM users on demand. C- Generate static credentials using AWS KMS and distribute them. D- Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access.

Use Amazon Cognito to associate unauthenticated users with an IAM role that has limited access.

Use an external identity provider to authenticate users.

Create a Lambda function to generate IAM users on demand.

Generate static credentials using AWS KMS and distribute them.

A developer is troubleshooting an application on EC2 that writes logs to CloudWatch Logs. The company needs to receive SNS notifications when the number of error messages exceeds a defined threshold in a 5‑minute period. Which solution meets these requirements? A- Rewrite the application to stream logs directly to SNS. B- Configure a subscription filter on the CloudWatch Logs group to trigger SNS notifications. C- Install Amazon Inspector on the EC2 instances and configure it to send SNS notifications. D- Create a CloudWatch metric filter to detect error patterns; set up a CloudWatch alarm on the metric; configure the alarm to send an SNS notification.

Create a CloudWatch metric filter to detect error patterns; set up a CloudWatch alarm on the metric; configure the alarm to send an SNS notification.

Rewrite the application to stream logs directly to SNS.

Configure a subscription filter on the CloudWatch Logs group to trigger SNS notifications.

Install Amazon Inspector on the EC2 instances and configure it to send SNS notifications.

A developer registers a Lambda function as a target for an Application Load Balancer (ALB) using the CLI, but the function is not invoked when requests are sent through the ALB. A- Lambda functions cannot be registered as ALB targets. B- Lambda functions can only be registered via the AWS Console. C- The permissions to invoke the Lambda function are missing. D- Cross‑zone load balancing is not enabled on the ALB.

The permissions to invoke the Lambda function are missing.

Lambda functions cannot be registered as ALB targets.

Lambda functions can only be registered via the AWS Console.

Cross‑zone load balancing is not enabled on the ALB.

A company wants to deploy static websites on AWS with phased releases (development, staging, UAT, production) triggered by code merges from various version control systems (CodeCommit, Bitbucket, GitHub), ensuring HTTPS sin servidores en ejecución continua. Which solution meets these requirements with minimal operational overhead? A- Use AWS Amplify with a serverless backend, connecting repository branches to the respective environments, and trigger deployments via code merges. B- Deploy each website using AWS Elastic Beanstalk with multiple environments linked via the EB CLI and automate deployments using CodePipeline. C- Host each website in separate Amazon S3 buckets for each environment, with deployments managed by CodePipeline and CodeBuild. D- Deploy each website on individual Amazon EC2 instances using custom deployment scripts triggered by code merges.

Use AWS Amplify with a serverless backend, connecting repository branches to the respective environments, and trigger deployments via code merges.

Deploy each website using AWS Elastic Beanstalk with multiple environments linked via the EB CLI and automate deployments using CodePipeline.

Host each website in separate Amazon S3 buckets for each environment, with deployments managed by CodePipeline and CodeBuild.

Deploy each website on individual Amazon EC2 instances using custom deployment scripts triggered by code merges.

A company is building a web application that generates reports on demand. Reports are available within one hour, remain accessible for 8 hours, and are deleted after 2 days. Which solution meets these requirements with minimal operational overhead? A- Generate reports and store them as items in DynamoDB with TTL; generate a URL for retrieval. B- Generate reports and store them in an S3 bucket with server‑side encryption; generate presigned URLs; add S3 Lifecycle rules to delete reports older than 2 days. C- Generate reports and store them in an RDS database; generate a URL for retrieval; schedule a Lambda function to delete old records. D- Generate reports and store them in an RDS database; attach reports to SNS messages and notify customers.

Generate reports and store them in an S3 bucket with server‑side encryption; generate presigned URLs; add S3 Lifecycle rules to delete reports older than 2 days.

Generate reports and store them as items in DynamoDB with TTL; generate a URL for retrieval.

Generate reports and store them in an RDS database; generate a URL for retrieval; schedule a Lambda function to delete old records.

Generate reports and store them in an RDS database; attach reports to SNS messages and notify customers.

A developer is creating an application that processes transaction data asynchronously with a Lambda function. The application sometimes fails, and the developer wants a second Lambda function to be invoked automatically to handle errors and log details when a failure occurs. A- Configure a Lambda function destination for failures; specify the error-handling Lambda function’s ARN. B- Enable AWS X‑Ray tracing and have the function send stack traces to a second Lambda function. C- Configure a Lambda function trigger with a failure condition; specify the error-handling function’s ARN. D- Create a CloudWatch alarm that triggers the error-handling Lambda function when failures occur.

Configure a Lambda function destination for failures; specify the error-handling Lambda function’s ARN.

Enable AWS X‑Ray tracing and have the function send stack traces to a second Lambda function.

Configure a Lambda function trigger with a failure condition; specify the error-handling function’s ARN.

Create a CloudWatch alarm that triggers the error-handling Lambda function when failures occur.

A company receives food orders from various partners through a microservices architecture using API Gateway and AWS Lambda. Each partner calls a customized API that triggers a shared Lambda function to process orders. Partners must be notified only for their own orders, and the solution should allow easy addition of new partners with minimal code changes. Which approach is the most scalable? A- Create separate SNS topics for each partner and have the Lambda function publish order updates to the respective SNS topic. B- Develop distinct Lambda functions for each partner to send notifications directly to their service endpoints. C- Create a single SNS topic, have the Lambda function publish messages with partner‑specific attributes, and subscribe each partner with an SNS filter policy to receive only their messages. D- Use a single SNS topic and subscribe all partners to it without filtering.

Create a single SNS topic, have the Lambda function publish messages with partner‑specific attributes, and subscribe each partner with an SNS filter policy to receive only their messages.

Create separate SNS topics for each partner and have the Lambda function publish order updates to the respective SNS topic.

Develop distinct Lambda functions for each partner to send notifications directly to their service endpoints.

Use a single SNS topic and subscribe all partners to it without filtering.

A developer is processing clickstream data using Amazon Kinesis Data Streams. The data experiences periodic spikes, and PutRecords API calls sometimes fail with capacity errors. Which techniques will help mitigate these exceptions? (Choose two.) A- Implement retries with exponential backoff. B- Use a PutRecord API instead of PutRecords. C- Reduce the frequency and/or size of the requests. D- Use Amazon SNS instead of Kinesis. E- Reduce the number of KCL consumers.

Implement retries with exponential backoff.

Reduce the frequency and/or size of the requests.

Use a PutRecord API instead of PutRecords.

Use Amazon SNS instead of Kinesis.

Reduce the number of KCL consumers.

A company is migrating its legacy database to Amazon Aurora PostgreSQL. The company requires that database credentials be stored securely and rotated automatically without extra programming overhead. Which solution meets these requirements? A- Use IAM database authentication for token-based access. B- Store the credentials in AWS Secrets Manager and enable automatic rotation. C- Store the credentials in AWS Systems Manager Parameter Store and manually rotate them. D- Use an on‑premises HSM to generate and manage credentials.

Store the credentials in AWS Secrets Manager and enable automatic rotation.

Use IAM database authentication for token-based access.

Store the credentials in AWS Systems Manager Parameter Store and manually rotate them.

Use an on‑premises HSM to generate and manage credentials.

An application processing clickstream data using Amazon Kinesis experiences occasional PutRecords API failures during traffic spikes. Which two techniques can help mitigate these exceptions? A- Implement retries with exponential backoff. B- Use the PutRecord API instead of PutRecords. C- Reduce the frequency and/or size of the requests. D- Use Amazon SNS instead of Kinesis. E- Reduce the number of KCL consumers.

Implement retries with exponential backoff.

Reduce the frequency and/or size of the requests.

Use the PutRecord API instead of PutRecords.

Use Amazon SNS instead of Kinesis.

Reduce the number of KCL consumers.

A developer is writing a CloudFormation template in YAML to deploy a serverless application that uses API Gateway, DynamoDB, and Lambda. Which AWS service or tool should be used to define the serverless resources? A- Use CloudFormation serverless intrinsic functions. B- Use AWS Elastic Beanstalk. C- Use AWS Serverless Application Model (AWS SAM). D- Use AWS Cloud Development Kit (AWS CDK).

Use AWS Serverless Application Model (AWS SAM).

Use CloudFormation serverless intrinsic functions.

Use AWS Cloud Development Kit (AWS CDK).

An application storing personal health information (PHI) in an encrypted Amazon RDS for MySQL instance needs improved performance by caching frequently accessed data, with capabilities to sort or rank the cached datasets. Which solution meets these requirements? A- Deploy an Amazon ElastiCache for Redis instance with encryption enabled in transit and at rest to store frequently accessed data. B- Deploy an Amazon ElastiCache for Memcached instance with encryption enabled in transit and at rest to cache data. C- Set up an Amazon RDS MySQL read replica with SSL and use it for caching frequently accessed data. D- Use an Amazon DynamoDB table with a DynamoDB Accelerator (DAX) cluster to cache frequently accessed data.

Deploy an Amazon ElastiCache for Redis instance with encryption enabled in transit and at rest to store frequently accessed data.

Deploy an Amazon ElastiCache for Memcached instance with encryption enabled in transit and at rest to cache data.

Set up an Amazon RDS MySQL read replica with SSL and use it for caching frequently accessed data.

Use an Amazon DynamoDB table with a DynamoDB Accelerator (DAX) cluster to cache frequently accessed data.

Desarrollador prueba extendida

Authored by ALFREDO CARRACEDO

Computers

Professional Development

Used 1+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View
Student View

105 questions

Show all answers

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A social media application uses the AWS SDK for JavaScript on the frontend to obtain user credentials from AWS STS. The application stores assets in an S3 bucket and serves them through a CloudFront distribution. The credentials for the assumed role are stored in plaintext in a JSON file within the application code. Which solution will allow the application to retrieve user credentials without hardcoding them?

Add a LambdaEdge function to the distribution; invoke it on viewer request; grant its role permission to access AWS STS; move all SDK calls into the function.

Add a CloudFront function to the distribution; invoke it on viewer request; grant its role permission to access AWS STS; move all SDK calls into the function.

Add a LambdaEdge function to the distribution; invoke it on viewer request; move credentials from the JSON file into the function; move all SDK calls into the function.

Add a CloudFront function to the distribution; invoke it on viewer request; move credentials from the JSON file into the function; move all SDK calls into the function.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer is creating a Lambda function that retrieves data from a third‑party system, formats it into a PDF, and encrypts the file using AWS KMS. The PDF file can exceed 1 MB. Which step must be taken to ensure that the encryption can be reversed later?

Store the encrypted data key from GenerateDataKey along with the encrypted file.

Store the plaintext key from GenerateDataKey on disk.

Use the plaintext key with the KMS Encrypt API to encrypt the file.

Use the encrypted key with the KMS Encrypt API to encrypt the file.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer wants to reduce risk when deploying a new version of a Lambda function by splitting traffic between the existing version and the new version.

Configure a weighted routing policy in Route 53 to split traffic between the versions.

Create a Lambda function alias that splits traffic between the two versions.

Create an Application Load Balancer (ALB) that splits traffic between the two versions.

Create a new Lambda function that filters requests and invokes the appropriate version based on content.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer is designing a serverless multi‑tier application for a game. The application must allow users to register and log in via a web browser and make requests to Lambda functions behind an API Gateway HTTP API. Which solution meets these requirements with minimal operational overhead?

Create Amazon Cognito user pools to integrate with external social identity providers and configure IAM roles for identity pools.

Program the sign‑in page to create IAM groups and assign roles.

Create an RDS for SQL Server database to store user credentials and manage access.

Configure the sign‑in page to store users in a DynamoDB table with an attached IAM policy.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer is building a cloud‑based photo storage application for mobile users that supports tens of thousands of users. The application uses an Amazon API Gateway REST API integrated with AWS Lambda functions to process photos and stores photo metadata in Amazon DynamoDB. Users must sign up, upload photos (300 KB to 5 MB), and retrieve previously uploaded images. Which solution minimizes operational overhead?

Use Amazon Cognito user pools for user account management, set up an API Gateway Cognito authorizer, and have the Lambda function store both photos and metadata in DynamoDB, retrieving photos directly from DynamoDB.

Use Amazon Cognito user pools for user management, configure an API Gateway Cognito authorizer, and have the Lambda function store photos in Amazon S3 while saving the S3 object key in DynamoDB for metadata; retrieve photos by querying DynamoDB for the key.

Create an IAM user for each application user during sign‑up, use IAM authentication with API Gateway, and use the Lambda function to store photos in Amazon S3 while saving the S3 key in DynamoDB; retrieve photos by querying DynamoDB.

Create a DynamoDB table for user accounts, implement a Lambda authorizer to validate credentials against it, integrate it with API Gateway, and have the Lambda function store photos in Amazon S3 while saving the S3 key in DynamoDB; retrieve photos by querying DynamoDB.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer supports an application that uses a DynamoDB table. The table stores customer orders, and the application must perform an operation to retrieve multiple items with a minimum impact in database. Which DynamoDB API call is most efficient for this purpose?

BatchGetItem.

GetItem.

Scan.

Query.

MULTIPLE CHOICE QUESTION

2 mins • 1 pt

A developer is creating an application that stores sensitive data in a DynamoDB table. The table is configured to send change events to a DynamoDB stream, which triggers a Lambda function to process incoming orders. An operational review reveals that some orders have a quantity of 0. The developer needs to create a dashboard showing the number of unique customers affected per day. Which solution meets these requirements?

Grant the Lambda function permission to send logs to CloudWatch Logs; implement a CloudWatch Logs Insights query that counts unique customers for orders with quantity 0, grouped by day; add the query to a CloudWatch dashboard.

Use Amazon Athena to query CloudTrail logs for API calls and build a dashboard.

Configure the Lambda function to send events to EventBridge; create a rule to group unique customers and output to a dashboard.

Enable custom CloudWatch metrics for the DynamoDB stream; create an alarm that groups unique customers; add the alarm to a dashboard.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Microsoft

or continue with

Facebook

Apple

Others

By signing up, you agree to our Terms of Service & Privacy Policy

Already have an account?

Similar Resources on Wayground

100 questions

Fundamentals of Information Systems

Quiz

•

Professional Development

110 questions

C Programming Quiz

Quiz

•

Professional Development

102 questions

BANKING LAW AND PRACTICES QUESTIONS

Quiz

•

Professional Development

Popular Resources on Wayground

10 questions

Safety Day 2026 – Student Review

Quiz

•

9th Grade

21 questions

Continents and Oceans

Quiz

•

6th Grade

20 questions

Parts of Speech

Quiz

•

5th Grade

16 questions

Subject & Predicate

Quiz

•

5th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

12 questions

Map Skills

Quiz

•

3rd Grade

22 questions

Continents and Oceans

Quiz

•

5th Grade

15 questions

Rounding Decimals

Quiz

•

5th Grade

Discover more resources for Computers

10 questions

How to Email your Teacher

Quiz

•

Professional Development

30 questions

Communication On The Job - Midterm Prep

Quiz

•

Professional Development

20 questions

Block Buster Movies

Quiz

•

10th Grade - Professi...